A highly reliable industrial control system provides for the processing of redundant control signals on as little as a single serial network without overloading the network by preprocessing input signals for coincidence and sending only the coincidence signal either periodically or on a change of state. Further compression of sent data is realized by extracting a reduced subset of transmission states from the input signals and transmitting only the transmission states.
Legal claims defining the scope of protection, as filed with the USPTO.
1. A high reliability industrial control system comprising: a controller including a first network interface to a shared serial network; an input module having at least two interface circuits for receiving at least two redundant input signals, the interface circuits communicating with at least one processor via an internal bus, the processor further communicating with a second network interface to the shared serial network; wherein the processor executes a stored program to: (i) receive the redundant input signals processed by the interface circuits; (ii) determine a coincidence of the redundant input signals within a window of a predefined time period; and (iii) only when there is coincidence within the window, transmitting via the second network interface, at least one coincidence signal indicating a coincident state of the redundant input signals to the controller.
2. The industrial control system of claim 1 wherein the processor executes the stored program to transmit to the controller at least two redundant messages on the shared network indicating the coincident state of the redundant input signals when there is coincidence within the window.
3. The industrial control system of claim 1 wherein the interface circuit includes two processors with each interface circuit communicating with a different processor, and wherein the processors communicate with each other via an internal bus and execute stored programs to: (i) each receive a different of the redundant input signals processed by the interface circuits; (ii) communicate with the other processor to determine a coincidence of the redundant input signals within a window of a predefined time period; and (iii) only when there is coincidence within the window, each processor transmitting to the controller via the second network interface, a common coincidence signal indicating a coincident state of the redundant input signals.
4. The industrial control system of claim 3 wherein the second network interface includes two redundant interface circuits each dedicated to one of the processors.
5. The industrial control system of claim 1 wherein the processor executes the stored program to determine a coincidence as existing when one related signal is the complement of the other related signal within the window.
6. The industrial control system of claim 1 wherein the processor executes the stored program to determine a coincidence as existing when one related signal is the same logical state as the other related signal within the window.
7. The industrial control system of claim 1 wherein the input circuits sample the redundant input signal at regular sample times and wherein the processor executes the stored program to determine a coincidence as existing within the window by detecting a lack of coincidence and reviewing a predetermined number of samples commensurate with the period of time of the window and determining a coincidence only if coincidence is obtained at one of the predetermined number of samples.
8. The industrial control system of claim 1 including further: an output circuit having a third network interface to the shared serial network for creating an output signal related to at least one of the redundant input signals and wherein the output circuit communicates its output signal to the input module via the third network interface and wherein the communicated output signal is the coincidence signal.
9. The industrial control system of claim 1 wherein the processor executes the stored program to only when there is no coincidence followed by coincidence within the window, transmitting via the second network interface, at least one coincidence signal indicating a coincident state of the redundant input signals to the controller.
10. The industrial control system of claim 1 wherein the processor further executes the stored program to, only when there is no coincidence within the window, enter a safety state indicating failure of the industrial control system.
11. The industrial control system of claim 10 wherein the processor executes the stored program to transmit via the second network interface on a regular basis one of a coincidence signal indicating a coincident state of the redundant input signals to the controller or a safety state signal indicating a failure of the industrial control system.
12. The industrial control system of claim 1 wherein the input module includes at least four input circuits for receiving at least two pairs of redundant input signals and wherein the processor further executes the stored program to: (i) receive the two pairs of redundant input signals processed by the interface circuits; (ii) determine a first and second coincidence of the respective pairs of redundant input signals within at least one window of the predefined time period; and (iii) only when there is coincidence within the window for each of the two pairs of input signals, map the state of the two pairs of inputs to a lesser number of transmission states, transmitting via the second network interface, at least one coincidence signal indicating a transmission state of the redundant input signals to the controller.
13. A method of operating an industrial control system including a controller having a first network interface to a shared serial network; and an input module having at least two interface circuits for receiving redundant input signals, the interface circuits communicating with at least one processor via an internal bus, the processor further communicating with a second network interface to the shared serial network, the method comprising the steps of: wherein the processor executes a stored program to: (i) receive the redundant input signals at the input module; (ii) at the input module, determining a coincidence of the redundant input signals within a window of predefined time period; and (iii) only when there is coincidence within the window, transmitting from the input module to the controller via the second network interface, at least one coincidence signal indicating a coincident state of the redundant input signals.
14. The method of claim 13 wherein step (iii) transmits to the controller at least two redundant messages on the shared network indicating the coincident state of the redundant input signals when there is coincidence within the window.
15. The method of claim 13 wherein the interface circuit includes two processors with each interface circuit communicating with a different processor which each receive a different of the redundant input signals processed by the interface circuits, wherein step (ii) includes the step of communicating between the two processors to determine a coincidence of the redundant input signals within a window of a predefined time period.
16. The method of claim 15 wherein the second network interface includes two redundant interface circuits each dedicated to one of the processors.
17. The method of claim 13 wherein step (ii) determines a coincidence to be existing when one related signal is the complement of the other related signal within the window.
18. The method of claim 13 wherein step (ii) determines a coincidence to be existing when one related signal is the same logical state as the other related signal within the window.
19. The method of claim 13 wherein the input circuits sample the redundant input signal at regular sample times and wherein step (ii) determines a coincidence as existing within the window by detecting a lack of coincidence and reviewing a predetermined number of samples commensurate with the period of time of the window and determining a coincidence only if coincidence is obtained at one of the predetermined number of samples.
20. The method of claim 13 wherein the control system further includes an output circuit having a third network interface to the shared serial network for creating an output signal related to at least one of the redundant input signals, and including the step of communicating the output signal from the output circuit to the input module via the third network interface to be one of the redundant input signals.
21. The method of claim 13 wherein step (iii) transmits via the second network interface, at least a coincidence signal indicating a coincident state of the redundant input signals to the controller only when there is no coincidence followed by coincidence within the window.
22. The method of claim 13 including the step of: only when there is no coincidence within the window, entering a safety state indicating failure of the industrial control system.
23. The method of claim 22 wherein step (iii) transmits via the second network interface on a regular basis one of a coincidence signal indicating a coincident state of the redundant input signals to the controller or a safety state signal indicating a failure of the industrial control system.
24. The method of claim 13 wherein the input module includes at least four input circuits for receiving at least two pairs of redundant input signals and wherein the steps include: (i) receiving the two pairs of redundant input signals processed by the interface circuits; (ii) determining a first and second coincidence of the respective pairs of redundant input signals within at least one window of the predefined time period; and (iii) only when there is coincidence within the window for each of the two pairs of input signals mapping the state of the two pairs of inputs to a lesser number of transmission states, transmitting via the second network interface, at least one coincidence signal indicating a transmission state of the redundant input signals to the controller.
25. An industrial control system for operation in conjunction with a safety system, the industrial control system comprising: a serial network; a controller including a first network interface coupled to the serial network; and an input module having at least two interface circuits coupled to a processing device, wherein the processing device includes a second network interface coupled to the serial network; wherein the processing device determines whether at least two redundant input signals have been received within a time window by way of the interface circuits and, if so, transmits a signal onto the serial network; and wherein the time window is a maximum amount of time that it would take for the redundant input signals to be provided by at least two properly-operating redundant components of the safety system in response to a state change of the safety system.
26. An industrial system for performing an industrial process comprising: a system component that performs an operation related to the industrial process; at least one sensor providing at least two redundant sensor signals concerning a status of the system component; at least two separate physical conductors; an input module having at least two interface circuits and a processing device having a first network interface, wherein the at least two interface circuits are coupled to the at least one sensor by way of the at least two separate physical conductors, respectively, by which the at least two interface circuits receive the at least two redundant sensor signals, respectively, a controller including a second network interface; and a network coupling the first and second network interfaces; wherein the processing device determines whether the at least two redundant sensor signals have been received at the input module and, if so, transmits a single coincidence signal onto the serial network for receipt by the controller.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
September 18, 2000
April 13, 2004
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.